Proactive Threat Detection for Connected Cars Using Recursive Bayesian Estimation

Abstract

Abstract-Upcoming disruptive technologies around autonomous driving of connected cars have not yet been matched with appropriate security by design principles and lack approaches to incorporate proactive preventative measures in the wake of increased cyber-threats against such systems. In this paper, we introduce proactive anomaly detection to a use-case of hijacked connected cars to improve cyber-resilience. Firstly, we manifest the opportunity of behavioural profiling for connected cars from recent literature covering related underpinning technologies. Then, we design and utilise a new dataset file for connected cars influenced by the Automatic Dependent Surveillance -Broadcast (ADS-B) surveillance technology used in the aerospace industry to facilitate data collection and sharing. Finally, we simulate the analysis of travel routes in real-time to predict anomalies using predictive modelling. Simulations show the applicability of a Bayesian estimation technique, namely Kalman Filter. With the analysis of future state predictions based on the previous behaviour, cyber-threats can be addressed with a vastly increased time-window for a reaction when encountering anomalies. We discuss that detecting real-time deviations for malicious intent with predictive profiling and behavioural algorithms can be superior in effectiveness than the retrospective comparison of known-good/known-bad behaviour. When quicker action can be taken while connected cars encounter cyber-attacks, more effective engagement or interception of command and control will be achieved.

Cyber Resilience and Incident Response in Smart Cities: A Systematic Literature Review

“…Within those studies, aspects of security may have been mentioned but they were not the focus of the study and often cyber defence was omitted altogether [18]. Moreover, although CPSs proliferate many aspects of modern lives and the demand and need for resilience in CPSs increases [151], the analysis revealed a distinct lack of available empirical research focused on the cyber resilience in the smart healthcare and smart citizen sectors (Figure 6). Possible reasons include the maturity of the Industry 4.0 technology compared with the smart sectors summarised in Figure 4 [84,85].…”

Federated Blockchain-Based Tracking and Liability Attribution Framework for Employees and Cyber-Physical Objects in a Smart Workplace

“…Other targeted components include but are not limited to communication channels, actuation control and end points [16]. The prevention, detection and mitigation of attacks against CPS are still emerging [17] while attack strategies are transformed from older implementations such as Man-in-The-Middle (MiTM), Spoofing, Denial-of-Service (DoS) and Eavesdropping. Hence, the exploitation of security vulnerabilities in Smart Devices continue with a long list that includes security cameras, smart TVs, smart door locks, power outlets, and even smart toilets within buildings [15].…”

“…To help support the proactive [17] insider threat detection with a verifiable audit trail to facilitate DFIR, the value of BC technology should be exploited. Initially implemented for the Bitcoin cryptocurrency, BC technology is composed of cryptographically-linked append-only blocks forming a trusted, shared and distributed ledger of transactions.…”

An Overview on Security and Privacy Challenges and Their Solutions in Fog-Based Vehicular Application

“…Based on these mechanisms, malicious requests and activities are filtered. In [20] and [21] they use machine learning algorithms to detect abnormal behaviours and cyber-threats.…”